
TITLE OF THE INVENTION 

MULTILAYER BOARD IN WHICH WIRING OF SIGNAL LINE THAT REQUIRES 
TAMPER-RESISTANCE IS COVERED BY COMPONENT OR FOIL, DESIGN 
APPARATUS, METHOD, AND PROGRAM FOR THE MULTILAYER 
5 BOARD, AND MEDIUM RECORDING THE PROGRAM 

BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

The present invention relates to a multilayer board that 
10 is highly tamper-resistant , and a design apparatus, method, an 
program for the multilayer board. 

(2) Description of the Rel ated Art 

Recently, contents of various fields such as music, still 
15 images, moving images , and games have been distributed as digital 
information thanks to the development of digital information 
technology and widespread use of digital information 
communication infrastructures . 

Meanwhile, there has always been the fear that the digital 
20 contents are acquired by an unauthorized party by means of 
interception of communications, wiretapping, or disguise, and 
that the acquired contents are tampered or copied illegally in 
recording media. It is therefore very important in protecting 
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the right of copyright owners or profits of distributors that 
any devices to deal with such contents are tamper-resistant, 
namely, difficult to unauthorized accesses. 

Various conventional security technologies are available 
5 to make a communication medium tamper-resistant. For example, 
y, in a challenge-response type mutual authentication, a 

P transmitting side and a receiving side authenticate themselves 

X: by exchanging a random number and a response value, and only 

y i 

iJ. when the authentication succeeds, security data protected by 

u, 10 copyright is allowed to be transferred between them. 

Not only communication media but also multilayer boards 
containing semiconductors for reproducing contents require 
tamper-resistance. This is because information passing signal 
lines on multilayer boards may be probed and reproduced. To 
15 make multilayer boards tamper-resistant, therefore, signal 
lines, which transfer security signals (contents, signals used 
for authentication, etc), need be tamper-resistant. 

The following methods are known to be used for making such 
signal lines on multilayer boards tamper-resistant. 
20 (1) All functions contained in a multilayer board are achieved 
by a one-chip IC so that any security signal does not 
transferred directly on the multilayer board. 
(2) Encryption and decryption processes are embedded into 
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components on the multilayer board. More specifically, 
a logic for encrypting security signals is embedded into 
a component for outputting security signals, and a logic 
for decrypting security signals is embedded into a component 
5 for inputting security signals. 

(3) Signal lines for transferring security signals on the 
multilayer board are coated with resin. 

Each of the above three methods, however, is to increase 
the cost since in the first method, existing ICs cannot be used, 
10 in the second method, logics for encryption and decryption need 
be embedded into corresponding components, and in the third 
method, resin is required as an additional material. 

SUMMARY OF THE INVENTION 
15 The ob j ect of the present invention is therefore to provide 

a highly tamper-resistant multilayer board, without increasing 

the production cost. 

The above object is fulfilled by a multilayer board, 

comprising a signal line requiring tamper-resistance , the signal 
20 line including: (a) a conductive trace and (b) a conductive via 

that passes through layers of the multilayer board, wherein 

the conductive trace and an end of the conductive via existing 

on an outside layer of the multilayer board are placed under 
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one or more circuit components mounted on the outside layer. 

The above-described construction achieves a highly 
tamper-resistant multilayer board in which signal lines 
requiring tamper-resistance on outside layers are difficult to 
5 contact probing. 

In the above multilayer board, the signal line may further 
include a conductive trace on an inner layer that is sandwiched 
between sheets of foil and/or circuit components placed on layers 
above and below the inner layer so that the sheets of foil and/or 
10 circuit components hide the conductive trace on the inner layer 
when viewed from above or below. 

The above-described construction achieves a highly 
tamper-resistant multilayer board in which signal lines 
requiring tamper-resistance on inside layers are difficult to 
15 non-contact probing such as magnetic probing. 

In the above multilayer board, the sheets of foil placed 
on the layers that are outside the inner layer may be connected 
to either a ground or a power source. 

The above-described construction achieves a highly 
20 tamper-resistant multilayer board by enhancing the shielding 
effect and making the multilayer board to non-contact probing. 

In the above multilayer board, the conductive trace on 
the outside layer may be further covered by a circuit component 
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on another outside layer when viewed from above or below. 

The above-described construction achieves a highly 
tamper-resistant multilayer board in which signal lines 
requiring tamper-resistance on one outside layer are difficult 
5 to non-contact probing tried from the outside layer and the 
opposite outside layer. 
O In the above multilayer board, the signal line requiring 

tamper-resistance may be either a signal line that is input to 

y i 

5^ an encryption unit or a signal line that is output froma decryption 

M< 10 unit . 

fiJ The above-described construction achieves a highly 

^ tamper-resistant multilayer board in which signal lines 

transferring security signals requiring encryption are 
tamper-resistant . 
15 The above object is also fulfilled by a multilayer board, 

comprising: a certain signal line that includes (a) a conductive 
trace and (b) a conductive via that passes through layers of 
the multilayer board, wherein the conductive trace and an end 
of the conductive via existing on an outside layer of the 
20 multilayer board are placed under one or more circuit components 
mounted on the outside layer, the certain signal line further 
includes a conductive trace on an inner layer that is sandwiched 
between sheets of foil and/or circuit components placed on layers 
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above and below the inner layer so that the sheets of foil and/or 
circuit components hide the conductive trace on the inner layer 
when viewed from above or below, and the certain signal line 
is either a data line or an address line. 

The above-described construction achieves a high 
tamper-resistance in a mult i layer board in which security signals 
are transferred through a plurality of signal lines since all 
data signal lines and address signal lines on the multilayer 
board are hidden under components or sandwiched between 
components or sheets of foil. This construction also makes it 
difficult for one to identify a signal line among the plurality 
of signal lines that is transferring a security signal, achieving 
a highly tamper-resistant multilayer board. 

The above object is also fulfilled by a design apparatus 
for a multilayer board, the design apparatus comprising: a 
-component information acquiring means for acquiring component 
information that shows (a) positions of circuit components, (b) 
sizes of the components, and (c) terminals contained by the 
components; a tamper-resistant signal line specif ying means for 
specifying a signal line that requires tamper-resistance, among 
signal lines connecting terminals; an outside layer wiring 
setting means for referring to the component information and 
setting areas on outside layers covered by circuit components 
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as outside layer wiring possible areas; a via setting means for 
referring to the component information, detecting an area where 
a first outside area wiring possible area of one outside layer 
overlaps another outside area wiring possible area of a second 
5 outside layer that is opposite to the first outside layer, when 
viewed from above or below in a vertical direction, and sets 
the detected area as a via possible area; and a wiring information 
generating means for determining a wiring pattern so that signal 
lines requiring tamper-resistance are wired only in the outside 
10 layer wiring possible areas and the via possible area, and 
generating wiring information that shows the determined wiring 
pattern. 

With the above-described construction, it is possible to 
design a highly tamper-resistant multilayer board in which signal 

15 lines requiring tamper-resistance on outside layers are 

difficult to contact probing since it is possible to design a 
wiring pattern so that signal lines requiring tamper-resistance 
are hidden under components on outside layers, after positions 
of components are determined. 

20 The above multilayer board may further comprise an inside 

layer wiring setting means for referring to the component 
information, detecting an area where a first outside area wiring 
possible area of one outside layer overlaps another outside area 
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wiring possible area of a second outside layer that is opposite 
to the first outside layer, when viewed from above or below in 
a vertical direction, and sets the detected area as an inside 
layer wiring possible area, wherein the wiring information 
5 generating means determines the wiring pattern so that signal 
lines requiring tamper-resistance are wired only in the outside 
w layer wiring possible areas, the via possible areas, and the 

'j! inside layer wiring possible area, and generates the wiring 

Zj information that shows the determined wiring pattern. 

i a 

= 10 With the above-described construction, it is possible to 

^ design a highly tamper-resistant multilayer board in which signal 

lines requiring tamper-resistance are difficult to non-contact 
probing since it is possible to design a wiring pattern so that 
such signal lines in inside layers are sandwiched between 
15 components on two outside layers, after positions of components 
are determined. 

The above multilayer boardmay further comprise an opposite 
layer wiring setting means for referring to the component 
information and setting areas on one outside layer covered by 
20 components as opposite layer wiring possible areas, wherein the 
wiring information generating means determines the wiring 
pattern so that signal lines requiring tamper-resistance are 
wired in areas on another outside layer that is opposite to the 
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outside layer, the areas on the other outside layer overlapping 

the opposite layer wiring possible areas when viewed from above 

or below in a vertical direction. 

With the above-described construction, it is possible to 
5 design a highly tamper-resistant multilayer board in which signal 

lines requiring tamper-resistance on an outside layer are 
% difficult to non-contact probing performed from the opposite 

yQ outside layer since it is possible to design a wiring pattern 

Si so that such signal lines are hidden under components on the 

; 10 opposite outside layer when viewed from above or below in a 
Lrj vertical direction. 

F) The above object is also fulfilled by a design apparatus 

-. — 

for a multilayer board, the design apparatus comprising: aboard 
information acquiring means for acquiring board information that 

15 shows (a) the number of layers and (b) ground/power-source 
layers; a tamper-resistant signal line specifying means for 
specifying a signal line requiring tamper-resistance; an inside 
layer wiring setting means for referring to the board information 
and setting layers sandwiched between two ground/power-source 

20 layers as wiring possible inside layers ; and a wiring information 
generating means for determining a wiring pattern so that signal 
lines requiring tamper-resistance are wired in the wiring 
possible inside layers, and generating wiring information that 
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shows the determined wiring pattern. 

With the above-described construction, it is possible to 
design a highly tamper-resistant multilayer board in which signal 
lines requiring tamper-resistance are difficult to non-contact 
5 probing since it is possible to design a wiring pattern so that 
such signal lines in inside layers are sandwiched between 
P ground/power-source layers, after positions of components 

connecting to the signal lines and a wiring pattern of the signal 
lines are determined, 
s 10 The above object is also fulfilled by a design apparatus 

y=-; for a multilayer board, the design apparatus comprising : aboard 

5! information acquiring means for acquiring board information that 

shows (a) wiring of signal lines that require tamper-resistance 
and (b) positions of components connected to the signal lines; 
15 an exposed portion detecting means for referring to the board 
information and detecting portions of the signal lines that are 
not covered by the components connected to the signal lines on 
outside layers; and a placement information generating means 
for determining a placement pattern so that one or more components 
20 that have not been placed yet are placed to cover the detected 
portions, and generating placement information that shows the 
determined placement pattern. 

With the above-described construction, it is possible to 
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design a highly tamper-resistant multilayer board in which signal 
lines requiring tamper-resistance on outside layers are 
difficult to contact probing since if a portion of such signal 
lines not hidden under a component on an outside layer is detected 
after positions of components connecting to the signal lines 
and a wiring pattern of the signal lines are determined, it is 
possible to place any components not having been placed yet to 
cover the not-hidden portion. 

The above design apparatus may further comprise an inside 
layer wiring detecting means for detecting portions of the signal 
lines wired on inside layers which are not sandwiched by the 
components on the outside layers when viewed from above or below 
in a vertical direction, wherein the placement information 
generating means determines the placement pattern so that one 
or more components on one or more outside layers that have not 
been placed yet are placed to cover the portions detected by 
the inside layer wiring detecting means when viewed from above 
or below, and generates the placement information that shows 
the determined placement pattern. 

With the above-described construction, it is possible to 
design a highly tamper-resistant multilayer board in which signal 
lines requiring tamper-resistance are difficult to non-contact 
probing since if a portion of such signal lines in inside layers 
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that is not sandwiched between components on two outside layers 
is detected after positions of components connecting to the 
signal lines and a wiring pattern of the signal lines are 
determined, it is possible to place any components not having 
been placed yet to sandwich the not-sandwiched portion. 

The above design apparatus may further comprise an opposite 
layer exposed portion detecting means for referring to the board 
information and detecting portions of the signal lines that are 
wired on one outside layer and are not covered by components 
connected to the signal lines on another outside layer that is 
opposite to the outside layer, wherein the placement information 
generating means determines the placement pattern so that one 
or more components on the opposite outside layer that have not 
been placed yet are placed to cover the portions detected by 
the opposite layer exposed portion detecting means when viewed 
from above or below, and generates the placement information 
that shows the determined placement pattern. 

With the above-described construction, it is possible to 
design a highly tamper-resistant multilayer board in which signal 
lines requiring tamper-resistance are difficult to non-contact 
probing since if a portion of such signal lines on an outside 
layer that is not covered by any components on the opposite outside 
layer is detected after positions of components connecting to 
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the signal lines and a wiring pattern of the signal lines are 
determined, it is possible to place any components not having 
been placed yet on the opposite outside layer to cover the 
not-covered portion. 

The above object is also fulfilled by a design apparatus 
for a multilayer board, the design apparatus comprising: a board 
information acquiring means for acquiring board information that 
shows (a) the number of layers and (b) wiring of signal lines; 
a tamper-resistant signal line specifying means for specifying 
a signal line that requires tamper-resistance; a plane layer 
detecting means for detecting, as plane layers, two layers that 
sandwich a layer on which the signal line is wired; and a placement 
information generat ingmeans for determining a placement pattern 
so that sheets of foil on the plane layers cover the wiring of 
the signal line sandwiched by the plane layers when viewed from 
above or below in a vertical direction, and generating placement 
information that shows the determined placement pattern. 

With the above-described construction, it is possible to 
design a highly tamper-resistant multilayer board in which signal 
lines requiring tamper-resistance are difficult to non-contact 
probing since it is possible to determine a placement pattern 
of planes so as to sandwich wiring of the signal lines in inside 
layers, after a wiring pattern of the signal lines is determined. 
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The above object is also fulfilled by a design check 
apparatus for a multilayer board, the design check apparatus 
comprising: a board information acquiring means for acquiring 
board information that shows (a) wiring of a signal line that 
requires tamper-resistance and (b) placement of components; an 
exposed portion detecting means for referring to the board 
information and detecting portions of the signal line that are 
not covered by the components on outside layers; and a warning 
means for outputting a warning indicating the portions detected 
by the exposed portion detecting means. 

With the above-described construction, it is possible to 
check whether a tamper-resistant design has been done since if 
a portion of a signal line that requires tamper-resistance but 
is not hidden under a component on an outside layer is detected, 
the portion is indicated by the warning, during or after a design 
of the multilayer board. 

The above design check apparatus may further comprise: 
an inside layer uncovered portion detecting means for referring 
to the board information and detecting portions of the signal 
line in inside layers that are not sandwiched between components 
or sheets of foil placed on two outside layers when viewed from 
above or below in a vertical direction, wherein the warning means 
further outputs a warning that indicates the portions detected 
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by the inside layer uncovered portion detecting means. 

With the above-described construction, it is possible to 
check whether a highly tamper-resistant design has been done 
since if a portion of such a signal line that is not sandwiched 
between components or sheets of foil on two outside layers is 
detected, the portion is indicated by the warning, during or 
after a design of the multilayer board* 

The above design check apparatus may further comprise: 
an opposite layer uncovered portion detecting means for referring 
to the board information and detecting portions of the signal 
line that are wired on one outside layer and are not covered 
by components on another outside layer that is opposite to the 
outside layer when viewed from above or below in a vertical 
direction, wherein the warning means further outputs a warning 
indicating the portions detected by the opposite layer uncovered 
portion detecting means. 

With the above-described construction, it is possible to 
check whether a highly tamper-resistant design has been done 
since if a portion of such a signal line that is wired on one 
outside layer and is not covered by components on the opposite 
outside layer is detected, the portion is indicated by the warning, 
during or after a design of the multilayer board. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

These and the other objects, advantages and features of 
the invention will become apparent from the following description 
thereof taken in con j unction with the accompanying drawings which 
5 illustrate a specific embodiment of the invention. 

In the drawings : 

FIG. 1 shows a circuit used in a digital image transmission 
system; 

FIG. 2 shows the construction of a multilayer board in 
10 Embodiment 1 ; 

FIG. 3 shows the construction of a multilayer board in 
Embodiment 2; 

FIG. 4 is a block diagram showing the construction of a 
design apparatus in Embodiment 3; 
15 FIG. 5A is a cross section of the multilayer board; 

FIG. 5B is a top plan view of the multilayer board; 

FIG. 6A shows the board information; 

FIG. 6B shows the component information; 

FIG. 6C shows the terminal information; 
20 FIG. 6D shows signal line information; 

FIG. 7A shows an outside layer wiring possible area; 

FIG. 7B shows a via possible area; 

FIG. 7C shows an inside layer wiring possible area; 
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FIG . 8 shows generated wiring information; 

FIG. 9 is a flowchart showing an operation procedure of 
the design apparatus of Embodiment 3; 

FIG. 10 is a block diagram showing the construction of 
5 a design apparatus in Embodiment 4; 

FIG. 11 shows a six-layer board; 

FIG. 12A shows the board information; 
]'f, FIG. 12B shows the component information; 

Si FIG. 12C shows the terminal information; 

= 10 FIG. 12D shows signal line information; 

y*j FIG. 13 shows the inside layer wiring possible areas; 

f=: 

pi FIG. 14 shows generated wiring information; 

FIG. 15 is a flowchart showing an operation procedure of 
the design apparatus of Embodiment 4; 
15 FIG. 16 is a block diagram showing the construction of 

a design apparatus in Embodiment 5; 

FIGs . 17A to 17C show processes in designing a four-layer 

board; 

FIG. 18A shows the board information; 
20 FIG. 18B shows the component information; 

FIG. 18C shows the signal line information; 
FIG. 19A shows the placement information that shows the 
determined positions of the components connecting to the signal 
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line requiring tamper-resistance; 

FIG. 19B shows the wiring information; 
FIG. 20 shows the exposed wiring; 

FIG. 21 shows the generated placement information; 

FIG. 22 is a flowchart showing an operation procedure of 
the design apparatus of Embodiment 5; 

FIG. 23 shows another method for placing components; 

FIG. 24 is a block diagram showing the construction of 
a design apparatus in Embodiment 6; 

FIG. 25 shows a multilayer board; 

FIG. 26A shows the board information; 

FIG. 2 6B shows the component information; 

FIG. 26C shows the terminal information; 

FIG. 26D shows the signal line information; 

FIG. 26E shows the wiring information; 

FIG. 27A shows the detected tamper-resistant wiring area; 
FIG. 27B shows the tamper-resistant ground/power-source 
layers; 

FIG. 28 shows the generated plane placement information; 

FIG. 29 is a flowchart showing an operation procedure of 
the design apparatus of Embodiment 6; 

FIG. 30 is a block diagram showing the construction of 
a wiring check apparatus in Embodiment 7; 
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FIGs. 31A and 31B show a multilayer board; 
FIG. 32A shows the board information; 
FIG. 32B shows the component information; 
FIG . 32C shows the terminal information; 
FIG. 32D shows the signal line information; 
FIG. 32E shows the wiring information; 
FIG. 33 shows the exposed wiring information; and 
FIG. 34 is a flowchart showing an operation procedure of 
the wiring check apparatus of Embodiment 7. 



DESCRIPTION OF THE PREFERRED EMBODIMENT 

The following describes embodiments of the present 
invention with reference to the attached drawings. 
Tamper-Resistant Signal Lines 
15 Tamper-resistant signal lines in a circuit embedded in 

a multilayer board will be described first. 

FIG. 1 shows a circuit used in a digital image transmission 
system. 

As shown in FIG. 1, a transmitting circuit 10 includes 
20 an input interface component 11 and an encryption/transmission 
component 12. The input interface component 11 inputs, from 
outside, digital image data in a format dedicated to the input 
from outside. The input interface component 11 transmits pixel 
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data and clocks to the encryption/transmission component 12 via 
signal lines 14 and 15, respectively. The 

encryption/transmission component 12 encrypts the received 
pixel data in accordance with the received clocks, and transmits 
5 the encrypted data to a receiving circuit 20 via a cable 30. 

The signal line 14 used to transfer pixel data to be 
encrypted requires tamper-resistance so that the pixel data is 
not copied in an unauthorized manner. 

The receiving circuit 20 includes a reception/decryption 
10 component 21 and an output interface component 22. The 

reception/decryption component 21 receives and decrypts the 
encrypted data to obtain pixel data. The reception/decryption 
component 21 transmits the pixel data and clocks to the output 
interface component 22 via signal lines 24 and 25, respectively. 
15 The output interface component 22 converts the received pixel 
data to a format dedicated to output, and outputs the converted 
data as digital image data. 

The signal line 24 used to transfer pixel data after the 
decryption requires tamper-resistance so that the pixel data 
20 is not copied in an unauthorized manner. 

Up to now, examples of signal lines requiring 
tamper-resistance in a circuit for transmitting digital image 
data have been explained. However, the signal lines that require 
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tamper-resistance are not limited to the above-described signal 
lines. The signal lines that require tamper-resistance include, 
in general, (a) signal lines used to transfer data before 
encryption to an encryption component and (b) signal lines used 
5 to transfer data after decryption that is output f roma decryption 
component, for example. The signal lines that require 
tamper-resistance also include, in general, signal lines used 
to transfer data to be encrypted for prevention from being probed 
in an unauthorized manner. 

10 Embodiment 1 

Embodiment 1 relates to a multilayer board in which 
if a signal line that requires tamper-resistance has a portion 
that appears on an outside layer, the portion is placed under 
a component on the outside layer so as to be covered by the 

15 component. 

Construction 

FIG. 2 shows the construction of a multilayer board in 
Embodiment 1. The present embodiment describes the case of a 
six-layer board. As shown in FIG. 2, the multilayer board 
20 includes the first layer 116, the second layer 117, the third 
layer 118, the fourth layer 119, the fifth layer 120, and the 
sixth layer 121, Of these, the first layer 116 and the sixth 
layer 121 are outside layers and the other layers are inside 
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layers. It is supposed here that the signal line connecting 
a terminal 102 of a component 101 with a terminal 115 of a component 
114 that requires tamper-resistance. The signal line is 
composed of foil 103 on an outside layer , a via 104, foil 111 
5 on the third layer, a via 105, foil 112 on the fourth layer, 
a via 106, and foil 113 on the sixth layer, 
£; It should be noted here that in the following embodiments 

If) Embodiment 1 inclusive, each foil constituting a signal line 

S! is provided as an example, but any conductive trace may be used 

: 10 instead of foil. 

Ifi Out of the portions constituting the signal line that 

IZ\ requires tamper-resistance, the portions that exist on the 

outside layers are placed under certain components. That is 
to say, the foil 103 and an end of the via 104 are placed under 
15 the component 101 on the first layer 116, an end of the via 105 
is placed under the component 107 on the first layer 116, an 
end of the via 106 is placed under the component 108 on the first 
layer 116, the other end of the via 104 is placed under the 
component 109 on the sixth layer 121, the other end of the via 
20 105 is placed under the component 110 on the sixth layer 121, 
and the foil 113 and the other end of the via 106 are placed 
under the component 114 on the sixth layer 121. 
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Summary 

As described above, in the multilayer board of the present 
embodiment, (a) sheets of foil that are placed on the outside 
layers and constitute such signal lines as require 
tamper-resistance and (b) vias that pass through layers for 
connection and constitute such signal lines as require 
tamper-resistance are placed under certain components on the 
outside layers. This makes it difficult for anyone to probe 
the signal line by contact and achieves a highly tamper-resistant 
multilayer board. 
Variations 

The present invention is not limited to the above-described 
embodiment and can be varied as follows. 

(1) In the case of the present embodiment, only the vias that 
pass through all layers constituting the multilayer board are 
used. However, such vias as pass through only certain layers 
among all the layers may be used. In this case, the ends of 
the vias on the outside layers are placed under certain components 
so that the ends are not exposed to outside. 

(2) In the case of the present embodiment, a six-layer board 
is used as a multilayer board. However, the number of the layers 
constituting the multilayer board may be two or more. 

(3) It is desirable that the components used in the present and 
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all the other embodiments do not have holes on the sides thereof 
so that a probe cannot be inserted into a hole on the side. 
Embodiment 2 

The present embodiment relates to a multilayer board in 
5 which if a signal line that requires tamper-resistance has a 
portion on one inside layer, the portion is sandwiched between 
sheets of foil on layers that are above and below the inside 
layer . 

Construction 

10 FIG. 3 shows the construction of a multilayer board in 

Embodiment 2. The same components in FIGs. 2 and 3 have the 
same numbers and will not be explained in detail here. 
Differences will be focused in the following description. 

In the present embodiment, if a signal line that requires 

15 tamper-resistance has a portion on one inside layer, the portion 
is sandwiched between planes (sheets of foil) so that the signal 
line is protected from magnetic probing. More particularly, 
the foil 111 on the third layer 118 and the foil 112 on the fourth 
layer 119 are sandwiched between planes 201 and planes 202. 

20 Summary 

As described above, in the multilayer board of the present 
embodiment, sheets of foil that are placed on the inside layers 
and constitute such signal lines as require tamper-resistance 
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are sandwiched between planes on layers that are outside the 
inside layers. This provides a shielding effect and protects 
the signal line from non-contact probing such as magnetic probing, 
achieving a highly tamper-resistant multilayer board . 
5 Variations 

The present invention is not limited to the above-described 
embodiment and can be varied as follows. 

(1) The plane 201 may be on any layer in so far as it is on 
a layer that is outside the layers having the sheets of 

10 foil 111 and 112 thereon, and may be on the first layer 

116, for example. This applies to the plane 202, and 
therefore may be on the sixth layer 121, for example. 

(2) To increase the shielding effect, the planes 201 and 202 
may be connected to a power source or a ground. 

15 (3) The sheets of foil 111 and 112 may be sandwiched between 
components on an outside layer andplanes on an inside layer . 
Also, the foil 111 and 112 may be sandwiched between 
components on the two outside layers. 
(4) In the present embodiment, the target to be protected from 

20 non-contact probing is sheets of foil on inside layers. 

However, ends of vias that constitute a signal line that 
requires tamper-resistance may be sandwiched between 
components or sheets of foil, as well. 
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(5) In the present embodiment, the target to be protected from 
non-contact probing is portions of a signal line placed 
on inside layers. However, there is a case in which a 
portion of a signal line placed on an outside layer should 
be protected from non-contact probing that is performed 
from the opposite outside layer. To deal with the case, 
(a) the target portion of the signal line is placed in an 
area on the first layer, the area corresponding in the 
vertical direction to an area covered by a component on 
the sixth layer or an area covered by foil on an inside 
layer; or (b) the target portion of the signal line is placed 
in an area on the first layer, the area corresponding in 
the vertical direction to an area covered by foil on the 
second layer, for example. 

(6) In Embodiments 1 and 2, portions of a certain signal line 
that requires tamper-resistance are placed under certain 
components or sandwiched between components or sheets of 
foil. However, this arrangement may be extended to all 
data signal lines and address signal lines of the multilayer 
board. 

Embodiment 3 

The present embodiment relates to a design apparatus that 
determines a wiring pattern so that a certain signal line becomes 
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tamper-resistant, after positions of components are determined . 
Construction 

FIG- 4 is a block diagram showing the construction of a 
design apparatus in Embodiment 3. As shown in FIG. 4, the design 
apparatus 300 includes a command input unit 301 , a data input 
unit 302, a command analyzing unit 303, an outside layer wiring 
setting unit 304, a via setting unit 305, an inside layer wiring 
setting unit 306, a wiring information generating unit 307, a 
design information storage unit 308, and a display unit 309. 

FIG. 5A is a cross section of the multilayer board. FIG. 
5B is a top plan view of the multilayer board . Now, the components 
of the design apparatus 300 will be described with reference 
to these drawings. 

The display unit 309 displays design processes of a target 
wiring board on the screen. 

The data input unit 302 inputs circuit diagram information 
and design information or the like which are created by using 
a CAD apparatus or the like. The design information includes 
board information, component information, and terminal 
information. FIG. 6A shows the board information. FIG. 6B 
shows the component information. FIG. 6C shows the terminal 
information. FIG. 6D shows signal line information. 

The command input unit 301 may be a keyboard and/or a mouse 
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and is used by the user to input various design commands . The 
design command has the following command types: a component 
placement command, a wiring command, and a tamper-resistance 
specification command* It is supposed here that the 
tamper-resistance specification command is input and a signal 
line 525 connecting a terminal 523 with a terminal 524 is specified 
as a signal line that requires tamper-resistance. 

The command analyzing unit 303 analyzes a design command 
input to the command input unit 301, and determines the command 
type. 

The design information storage unit 308 stores the circuit 
diagram information and the design information input by the data 
input unit 302. 

The outside layer wiring setting unit 304 refers to the 
design information stored in the design information storage unit 
308 and sets an area on an outside layer covered by a component 
as an outside layer wiring possible area. 

The via setting unit 305 refers to the design information 
stored in the design information storage unit 308, detects an 
area where the outside area wiring possible area of a front outside 
layer (layer 1) overlaps the outside area wiring possible area 
of a back outside layer (layer 2), and sets the detected area 
as a via possible area in which a via used for wiring a 
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tamper-resistant signal line can be included. 

The inside layer wiring setting unit 306 refers to the 
design information stored in the design information storage unit 
308 and sets a wiring layer being an inside layer as an inside 
5 layer wiring possible area. 

FIG . 7A shows an outside layer wiring possible area . FIG . 
7B shows a via possible area. FIG. 7C shows an inside layer 
wiring possible area. 

The wiring information generating unit 307 determines a 
10 wiring pattern so that signal lines that require 

tamper-resistance are wired only in the outside layer wiring 
possible areas, via possible areas, and inside layer wiring 
possible areas, and the other signal lines are wired in wiring 
possible areas, and generates wiring information that shows the 
15 determined wiring pattern. FIG. 8 shows generated wiring 
information. 
Operation 

The operation of the design apparatus of the present 
invention will be explained using the board shown in FIGs . 5A 
20 and 5B as an example. 

FIG. 9 is a flowchart showing an operation procedure of 
the design apparatus of Embodiment 3. 

The data input unit 302 inputs design information into 
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the design information storage unit 308 (step S401) . 

The command input unit 301 inputs a tamper-resistance 
specification command that specifies the signal line 525 as a 
signal line that requires tamper-resistance (step S402) . 
5 The outside layer wiring setting unit 304 refers to the 

design information, detects that areas 502, 504, and 506 are 
covered by the components 501, 503, and 505 on the first layer 
513 being an outside layer of the board, and sets the areas 502, 
504, and 506 as the outside layer wiring possible areas on the 
10 first layer 513. 

The outside layer wiring setting unit 304 refers to the 
design information, detects that areas 508, 510, and 512 are 
covered by the components 507, 509, and 511 on the sixth layer 
518 being another outside layer of the board, and sets the areas 
15 508, 510, and 512 as the outside layer wiring possible areas 
on the sixth layer 518 (step S403) . 

The via setting unit 305 detects that the areas 519, 520, 
and 521 are areas where the outside area wiring possible areas 
502, 504, and 506 of the first layer overlaps the outside area 
20 wiring possible areas 508, 510, and 512 of the sixth layer, and 
sets the areas 519, 520, and 521 as via possible areas (step 
S404) . 

The inside layer wiring setting unit 306 sets the inside 
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layers 514 (the second layer), 515 (the third layer), 516 (the 
fourth layer) , and 517 (the fifth layer) as inside layer wiring 
possible areas 522 (step S405) . 

The wiring information generating unit 307 determines a 
5 wiring pattern so that the signal line 525 that requires 

tamper-resistance is wired only in the outside layer wiring 
possible areas 502, 504, 506, 508, 510, and 512, via possible 
areas 519, 520, and 521, and inside layer wiring possible area 
522 using the Lee' s algorithm, and generates wiring information 
10 that shows the determined wiring pattern (step S406) . 
Summary 

As described above, the design apparatus of the present 
embodiment can determine a wiring pattern so that portions of 
the signal line that that require tamper-resistance are placed 
15 under components on outside layers, after the positions of the 
components are determined. This makes it possible to design 
a highly tamper-resistant multilayer board having a signal line 
that is difficult to contact probing. 
Variations 

20 The present invention is not limited to the above-described 

embodiment and can be varied as follows. 

(1) The present embodiment determines a wiring pattern 
so that portions (sheets of foil and via ends) of a signal line 



that requires tamper-resistance are hidden under components on 
outside layers in order to make the signal line to be difficult 
to contact probing. However , to make the signal line to be 
difficult to non-contact probing as well, every portion of the 
5 signal line in and on the inside layers may be included in spaces 
that are overlaps among the areas covered by components on the 
G two outside layers, when viewed from above and below, so that 

! i; the portions of the signal line are hidden under the components 

Zj when viewed from above and below. 

= 10 Furthermore, it is possible to make the portions of the 

fiJ signal line on the first layer to become difficult to non-contact 

Jr; probing performed from the sixth layer, by placing the portions 

of the signal line on the first layer in an area that overlaps 
an area covered by a component on the sixth layer. 
15 (2) In the present embodiment, the command input unit 301 

specifies a signal line that requires tamper-resistance. 
However, the information specifying the signal line may be input 
as a part of the signal line information and stored in the design 
information storage unit 308 . 
20 (3) In the present embodiment, the wiring information 

generating unit 307 determines the wiring pattern using the Lee' s 
algorithm. However, not limited to this, other methods may be 
used. Alternatively, the designer may determine the wiring 
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pattern manually. 
Embodiment 4 

The present embodiment relates to a design apparatus that 
determines a wiring pattern so that portions of the signal line 
5 that requires tamper-resistance are wired on inside layers 
sandwiched between two ground/power-source layers. 
Q Construction 

= y FIG . 10 is a block diagram showing the construction of 

a design apparatus in Embodiment 4. As shown in FIG. 10 , the 
a 10 design apparatus 900 includes a command input unit 301, a data 
FU input unit 302, a command analyzing unit 303, an inter 

ground/power-source layers wiring detection unit 901, an inside 
layer wiring setting unit 902, a wiring information generating 
unit 903, a design information storage unit 904, and a display 
15 unit 309. The same components in FIGs . 3 and 10 have the same 
numbers and will not be explained in detail here. Differences 
will be focused in the following description. 

FIG. 11 shows a six-layer board. Now, the components of 
the design apparatus will be described with reference to FIG. 
20 11. 

The design information storage unit 904 stores the circuit 
diagram information and the design information input by the data 
input unit 302. The design information includes board 
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information, component information, and terminal information. 
FIG. 12A shows the board information. As shown in FIG. 12A, 
the board information contains information that indicates layers 
designed as ground/power-source layers. FIG. 12B shows the 
component information. FIG. 12C shows the terminal information. 
FIG. 12D shows signal line information. 

The inter ground/power-source layers wiring detection 
unit 901 detects wiring layers that exist between 
ground/power-source layers as inter ground/power-source 
layers . 

The inside layer wiring setting unit 902 sets the detected 
inter ground/power-source layers as inside layer wiring possible 
areas. FIG. 13 shows the inside layer wiring possible areas 
set by the inside layer wiring setting unit 902. As shown in 
FIG. 13, the third and fourth layers sandwiched between the 
ground/power-source layers (the second layer and the fifth layer) 
are set as the inside layer wiring possible areas. 

The wiring information generating unit 903 determines a 
wiring pattern so that signal lines that require 
tamper-resistance are wired in the inside layer wiring possible 
areas in terms of the inside layer, and generates wiring 
information that shows the determined wiring pattern. FIG. 14 
shows generated wiring information. 
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Operation 

The operation of the design apparatus of the present 
invention will be explained using the board shown in FIGs . 12A 
through 12D as an example. 

FIG . 15 is a flowchart showing an operation procedure of 
the design apparatus of Embodiment 4 . 

The data input unit 302 inputs design information into 
the design information storage unit 904 (step S1001) . 

The command input unit 901 inputs a tamper-resistance 
specification command that specifies the signal line 1155 as 
a signal line that requires tamper-resistance (step S1002) . 
The inter ground/power-source layers wiring detection unit 901 
refers to the design information and detects the third layer 
1103 and the fourth layer 1104 that exist between the 
ground/power-source layers (the second layer 1102 and the fifth 
layer 1105) as inter ground/power-source layers (step S1003) . 

The inside layer wiring setting unit 902 sets the third 
layer 1103 and the fourth layer 1104 as inside layer wiring 
possible areas (step S1004). 

The wiring information generating unit 903 determines a 
wiring pattern so that the signal line 1155 that requires 
tamper-resistance includes a portion 1108 on the third layer 
1103 being an inside layer wiring possible area, and generates 
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wiring information that shows the determined wiring pattern ( step 

S1005) . 

Summary 

As described above, the design apparatus of the present 
5 embodiment can determine a wiring pattern so that portions of 
the signal line that requires tamper-resistance are wired on 
J=== inside layers sandwiched between two ground/power-source layers . 

fy This makes it possible to design a highly tamper-resistant 

m multilayer board having a signal line that is difficult to 

r J' 10 non-contact probing, 
n j Embodiment 5 

O The present embodiment relates to a design apparatus that 

determines positions of components connecting to a certain signal 
line, determines a wiring pattern of the certain signal line, 
15 and then if there is a portion of the signal line not hidden 
under a component on an outside layer, places a component, which 
has not been placed yet, to cover the exposed portion. 
Construction 

FIG. 16 is a block diagram showing the construction of 
20 a design apparatus in Embodiment 5. As shown in FIG. 16, the 
design apparatus 600 includes a command input unit 301, a data 
input unit 302, a display unit 309, a command analyzing unit 
303, a component detecting unit 601, a placement information 
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generating unit 602 , a wiring information generating unit 603 , 
an exposed wiring detecting unit 604, and a design information 
storage unit 60 6, The same components in FIGs. 3 and 16 have 
the same numbers and will not be explained in detail here. 
Differences will be focused in the following description. 

FIGs. 17A to 17C show processes in designing a four-layer 
board. Now, the components of the design apparatus will be 
described with reference to FIGs. 17A to 17C. 

The design information storage unit 606 stores the circuit 
diagram information and the design information input by the data 
input unit 302. The design information includes board 
information, component information, and signal line information. 
FIG. 18A shows the board information. FIG. 18B shows the 
component information. FIG. 18C shows the signal line 
information. 

The command input unit 301 and the command analyzing unit 
303 input and analyze a command that specifies a signal line 
that requires tamper-resistance among the signal lines shown 
in the signal line information. In this example, it is supposed 
that a signal line 888 connecting a terminal 802 with a terminal 
804 is specified as a signal line that requires 
tamper-resistance . 

The component detecting unit 601 refers to the design 
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information and detects components that connect to the signal 
line that requires tamper-resistance. In this example, it is 
supposed that the components 8 01 and 802 that connect to the 
signal line 888 are detected. 

The placement information generating unit 602 determines 
the positions of the components detected by the component 
detecting unit 601 so that the positions satisfy the designing 
conditions, and generates placement information that shows the 
determined positions. FIG. 19A shows the placement information 
that shows the determined positions of the components connecting 
to the signal line that requires tamper-resistance. It should 
be notedhere that in determining the positions of the components, 
the placement information generating unit 602 first assigns the 
position of exposed wiring detected by the exposed wiring 
detecting unit 604 to a component, and generates placement 
information that shows the determinedpositions of the components . 
FIG. 21 shows the generated placement information. 

The wiring information generating unit 603 determines a 
wiring pattern of signal lines that connect terminals, and 
generates wiring information that shows the determined wiring 
pattern. The wiring pattern may be determined manually by a 
designer or automatically determined using a wiring algorithm 
such as the Lee's algorithm. FIG. 19B shows the wiring 
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information. 

The exposed wiring detecting unit 604 detects an exposed 
portion of the signal line among the signal lines of which the 
wiring information generating unit 603 has determined the wiring 
pattern, the exposed portion of the signal line being a portion 
outside an area covered by a component . FIG . 20 shows the exposed 
wiring. 
Operation 

The operation of the design apparatus of the present 
invention will be explained using the board designing processes 
shown in FIGs. 17A through 17C. 

FIG. 22 is a flowchart showing an operation procedure of 
the design apparatus of Embodiment 5. 

The data input unit 302 inputs design information into 
the design information storage unit 606 (step S701) . 

The command input unit 301 inputs a tamper-resistance 
specification command that specifies the signal line 888 
connecting the terminal 802 and the terminal 804 as a signal 
line that requires tamper-resistance (step S702) . 

The component detecting unit 601 refers to the design 
information and detects the components 801 and 802 that connect 
to the signal line 888 that requires tamper-resistance (step 
S703) . 
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The placement information generating unit 602 determines 
the positions of the components 801 and 802 so that the positions 
satisfy the designing conditions, and generates placement 
information that shows the determined positions (step S704). 
Note that the positions may be anywhere on the board in so far 
as they satisfy the designing conditions. 

The wiring information generating unit 603 determines a 
wiring pattern between the terminals 802 and 804, and generates 
wiring information that shows the determined wiring pattern. 
The wiring pattern may be determined manually by a designer or 
automatically determined using a wiring algorithm such as the 
Lee's algorithm. In the case of the automatic determination, 
a conventional wiring algorithm such as the Lee's algorithm may 
be used in so far as the wiring algorithm satisfies the specified 
wiring design standard. In this example, it is supposed that 
the terminal 802 is connected with the terminal 804 by the foil 
805 on the first layer, the via 807, the foil 808 on an inside 
layer, the via 809, and the foil 810 on the fourth layer, as 
shown in FIG. 17A (step S705) . 

The exposed wiring detecting unit 604 detects an exposed 
portion of the signal line among the signal lines of which the 
wiring information generating unit 603 has determined the wiring 
pattern, the exposed portion of the signal line being a portion 

40 



outside an area covered by a component. In this example, it 
is supposed that the foil 811 and the via ends 812 and 813 on 
the first layer and the via end 819 on the fourth layer are detected 
as exposed wiring, as shown in FIG. 17B (step S706) . 

The placement information generating unit 602 determines 
the positions of the components by first assigning the position 
of exposedwiring, and generates placement information that shows 
the determined positions of the components. As shown in FIG. 
17C, on the first layer, the component 814 is placed to cover 
the foil 811 and the via end 812 that are the exposed wiring, 
and on the fourth layer, the component 815 is placed to cover 
the via end 819 being the exposed wiring, and on the first layer, 
the component 816 is placed to cover the via end 813 being the 
exposed wiring (step S707). 

The wiring information generating unit 603 determines a 
wiring pattern of signal lines, and generates wiring information 
that shows the determined wiring pattern (step S708) . 
Summary 

As described above, the design apparatus of the present 
embodiment (1) determines positions of components connecting 
to a signal line that requires tamper-resistance, (2) determines 
a wiring pattern of the signal line that requires 
tamper-resistance, then (3) if there is a portion of the signal 
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line not hidden under a component on an outside layer, places 
a component, which has not been placed yet, to cover the exposed 
portion. This makes it possible to design a highly 
tamper-resistant multilayer board having a signal line that is 
difficult to contact probing. 
Variations 

The present invention is not limited to the above-described 
embodiment and can be varied as follows. 

(1) The placement information generating unit 602 may place 
the component 801 connecting to the signal line that 
requires tamper-resistance onto the first layer, and place 
the component 803 on an area on the sixth layer that overlaps 
an area covered by the component 801 on the first layer, 
as shown in FIG. 23. 

(2) In the present embodiment, if there is a portion of the 
signal line (which requires tamper-resistance) not hidden 
under a component on an outside layer, the design apparatus 
determines a placement pattern so as to place a component, 
which has not been placed yet, to cover the exposed portion. 
This makes the signal line difficult to contact probing. 
However, to make the signal line difficult to non-contact 
probing as well, if there is a portion of the signal line 
in inside layers that is not sandwiched between components 
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on the two outside layers, the design apparatus may 
determine a placement pattern so as to place a component, 
which has not been placed yet, to be directly above or below 
the portion in inside layers. 

Furthermore, if there is, on the first layer, a portion 
of the signal line not placed in an area which does not 
correspond to any component on the sixth layer (the opposite 
outside layer ) in a vertical direction, the design apparatus 
may place a component on the sixth layer, which has not 
been placed yet, to correspond to the area on the first 
layer to make the signal line difficult to non-contact 
probing . 

In the present embodiment, the design apparatus determines 
(a) positions of components connecting to a signal line 
that requires tamper-resistance and (b) a wiring pattern 
of the signal line requiring tamper-resistance. However, 
the design apparatus may receive design information that 
specifies (a) positions of components connecting to a signal 
line that requires tamper-resistance and (b) a wiring 
pattern of the signal line requiring tamper-resistance, 
then the design apparatus may determine position of a 
component which has not been placed yet, to cover an exposed 
portion of the signal line. 
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Embodiment 6 

The present embodiment relates to a design apparatus that 
determines positions of planes so as to sandwich a portion of 
a signal line that requires tamper-resistance, the portion being 
5 placed on an inside layer, after a wiring pattern of the signal 
line is determined. 
Construction 

FIG. 24 is a block diagram showing the construction of 
a design apparatus in Embodiment 6. As shown in FIG. 24 , the 

10 design apparatus 1200 includes a command input unit 301, a data 
input unit 302, a command analyzing unit 303, a tamper-resistant 
wiring area detecting unit 1201, a tamper-resistant 
ground/power-source layer detecting unit 1202, a 
tamper-resistant plane generating unit 1203, and a design 

15 information storage unit 1204. The same components in FIGs. 
3 and 24 have the same numbers and will not be explained in detail 
here. Differences will be focused in the following description . 

FIG. 25 shows a multilayer board. Now, the components 
of the design apparatus will be described with reference to FIG. 

20 25. 

The design information storage unit 1204 stores the circuit 
diagram information and the design information input by the data 
input unit 302. The design information includes board 
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information, component information, signal line information, 
and terminal information. FIG. 2 6A shows the board information. 
FIG. 26B shows the component information. FIG. 26C shows the 
terminal information. FIG. 2 6D shows the signal line 
information. FIG. 26E shows the wiring information. 

The tamper-resistant wiring area detecting unit 1201 
refers to the design information and detects a tamper-resistant 
wiring area which is a wiring area in the inside layers and in 
which a portion of a signal line that requires tamper-resistance 
is placed. FIG . 27A shows the detected tamper-resistant wiring 
area . 

The tamper-resistant ground/power-source layer detecting 
unit 1202 detects two inside layers that sandwich an inside layer 
on which a portion of the signal line that requires 
tamper-resistance is placed, and sets the detected layers as 
the tamper-resistant ground/power-source layers. FIG. 27B 
shows the tamper-resistant ground/power-source layers. 

The tamper-resistant plane generating unit 1203 generates 
plane placement information that indicates that planes (sheets 
of foil) should be placed on the tamper-resistant 
ground/power-source layers so as to sandwich the detected 
tamper-resistant wiring area in a vertical direction. FIG. 28 
shows the generated plane placement information. 
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Operation 

The operation of the design apparatus of the present 
invention will be explained using the board shown in FIG. 25. 

FIG. 2 9 is a flowchart showing an operation procedure of 
5 the design apparatus of Embodiment 6. 

The data input unit 302 inputs design information into 
the design information storage unit 1204 (step S1301) . 

The command input unit 301 inputs a tamper-resistance 
specification command that specifies the signal line 1455 as 
10 a signal line that requires tamper-resistance (step S1302) . 

The tamper-resistant wiring area detecting unit 1201 
detects a tamper-resistant wiring area 1404 (step S1303) . 

The tamper-resistant ground/power-source layer detecting 
unit 1202 detects the second layer 1401 and the fourth layer 
15 1403 sandwiching the third layer 1402 on which a portion 1404 
of the signal line that requires tamper-resistance is placed, 
and sets the detected layers as the tamper-resistant 
ground/power-source layers (step S1304) . 

The tamper-resistant plane generating unit 1203 generates 
20 plane placement information that indicates that planes (sheets 
of foil) 1405 and 1406 should be placed on the tamper-resistant 
ground/power-source layers (namely, the second layer 1401 and 
the fourth layer 1403) so as to sandwich the detected 
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tamper-resistant wiring area (namely, an area containing the 
portion 1404) in a vertical direction (step S1305) . 
Summary 

As described above, after a wiring pattern of a signal 
line that requires tamper-resistance is determined, the design 
apparatus of the present embodiment determines positions of 
planes so as to sandwich a portion of the signal line on an inside 
layer. This makes it possible to design a highly 
tamper-resistant multilayer board having a signal line that is 
difficult to non-contact probing. 
Variations 

The present invention is not limited to the above-described 
embodiment and can be varied as follows. 

( 1 ) In the present embodiment , the planes sandwiching a portion 
of the signal line that requires tamper-resistance are not 
connected to a ground or a power source . However, to enhance 
the shielding effect, the planes may be connected to a ground 
or a power source. 

Embodiment 7 

The present embodiment relates to a wiring check apparatus 
that checks whether a wiring pattern has been designed so that 
a signal line that requires tamper-resistance has 
tamper-resistance, in the middle of or after a design of a 
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multilayer board. 
Construction 

FIG. 30 is a block diagram showing the construction of 
a wiring check apparatus in Embodiment 7. As shown in FIG. 30, 
5 the wiring check apparatus 1500 includes a command input unit 
301, a data input unit 302, a command analyzing unit 303, an 
exposed wiring detecting unit 1501, a warning message generating 
unit 1502, a display unit 309, and a design information storage 
unit 1503. 

10 The same components in FIGs. 3 and 30 have the same numbers 

and will not be explained in detail here. Differences will be 
focused in the following description. 

FIGs. 31A and 31B show a multilayer board. Now, the 
components of the design apparatus will be described with 

15 reference to FIGs. 31A and 31B. 

The design information storage unit 1503 stores the circuit 
diagram information and the design information input by the data 
input unit 302. The design information includes board 
information, component information, and terminal information. 

20 FIG. 32A shows the board information. FIG. 32B shows the 

component information. FIG. 32C shows the terminal information. 
FIG. 32D shows the signal line information. As shown in FIG. 
32D, the signal line information contains information that 
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indicates whether the signal line requires tamper-resistance. 
FIG . 32E shows the wiring information. 

The exposed wiring detecting unit 1501 refers to the design 
information and detects (a) sheets of foil and via ends that 
constitute a signal line that requires tamper-resistance and 
appear on an outside layer and (b) area on the outside layer 
covered by components. The exposed wiring detecting unit 1501 
then detects sheets of foil and via ends that are not covered 
by any components on the outside layer and are called exposed 
wiring, and sends exposed wiring information indicating the 
exposed foil and via ends to the warning message generating unit 
1502. FIG. 33 shows the exposed wiring information. 

The warning message generating unit 1502 generates a 
warning message in accordance with the exposed wiring 
information received from the exposed wiring detecting unit 1501 . 

The display unit 309 displays the warningmessage generated 
by the warning message generating unit 1502. FIG- 31B shows 
an example of a displayed warning message. 
Operation 

The operation of the wiring check apparatus of the present 
invention will be explained using the board shown in FIG. 31. 

FIG. 34 is a flowchart showing an operation procedure of 
the wiring check apparatus of Embodiment 7 . 
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The data input unit 302 inputs design information into 
the design information storage unit 1503 (step S1601) . 

The exposed wiring detecting unit 1501 refers to the design 
information and detects foil 1701 and a via end 1703 that 
constitute a signal line that requires tamper-resistance and 
appear on an outside layer, and detects a covered area 1706covered 
by a component 17 05 on the outside layer. 

The exposed wiring detecting unit 1501 then detects foil 
1707 and a via end 1709 that are exposed wiring not included 
in the covered area 1706, and sends exposed wiring information 
indicating the exposed foil 1707 and via end 1709 to the warning 
message generating unit 1502 (step S1602) . 

The warning message generating unit 1502 generates a 
warning message in accordance with the exposed wiring 
information received from the exposed wiring detecting unit 1501 
(step S1603) . 

The display unit 309 displays the warning message 1708 
generated by the warning message generating unit 1502 (step 
S1604) . 
Summary 

As described above, the wiring check apparatus of the 
present embodiment detects a portion of a signal line that 
requires tamper-resistance but is not covered by any components 
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on an outside layer , and displays a warning message that indicates 
the detected portion. This enables one to check if a 
tamper-resistant design has been done. 
Variations 

5 The present invention is not limited to the above-described 

embodiment and can be varied as follows- 

(1) The warning message shown in FIG. 31B is one example. The 

rn 

message may be displayed by highlighting or using a 
Si different color for the exposed wiring 1707. Data such 

= 10 as the layer on which the exposed wiring 1707 exists or 

Lrj the coordinates of the position may be output to file. 

#3 (2) In the present embodiment, the wiring check apparatus 

detects a portion of a signal line that requires 
tamper-resistance but is' not covered by any components on 
15 an outside layer, and displays a warning message that 

indicates the detected portion. As one variation, if a 
signal line that requires tamper-resistance has, on one 
inside layer, a portion that is not sandwiched between 
components or sheets of foil on the outside layers, a warning 
20 message indicating the portion may be displayed. 

Furthermore, as another variation, if a signal line 
requiring tamper-resistance has a portion on one outside 
layer and the opposite outside layer has no component that 
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corresponds to the area in the vertical direction, a warning 
message indicating the portion may be displayed. 
(3) The present invention may be a design method or a wiring 
check method having the steps described in the above 
embodiments. The present invention may be a computer 
program that allows a computer to execute these methods. 
The present invention may be a computer-readable recording 
medium on which the program is recorded. 

Although the present invention has been fully described 
by way of examples with reference to the accompanying drawings , 
it is to be noted that various changes and modifications will 
be apparent to those skilled in the art. Therefore, unless such 
changes and modifications depart from the scope of the present 
invention, they should be construed as being included therein. 



52 



